Overview of spam from Netzilla

7 Jun 2012

Note: Automated spam monitoring stopped several years ago. These web pages are maintained for historical reasons. Some may be updated from time to time as news about the individual sites becomes available.

No spam today

General information about Netzilla

new: For information about Jerry Reynolds' SLAPP lawsuit against me, see this document.

Netzilla was the largest (as of Mar 1999) porn-spammer on Usenet. Netzilla was also known as or associated with Sexzilla.com, Intel Telecom Corporation, and ITC.

See also Newsfeeds.com.

Netzilla was (as of March 1999) hosted by UUNet and Cable & Wireless.


Ownership & Contact Info

In late 1996, the whois data for netzilla.net identified the domain as being owned by Intel Telecom Corporation, with Jerry Reynolds listed as the contact person.

  Intel Telecom Corporation (NETZILLA2-DOM)
     PO Box 6504
     Fargo, ND 58109
     US

     Domain Name: NETZILLA.NET

     Administrative Contact, Billing Contact:
	Reynolds, Jerry  (JR3181)  postmaster@SEXZILLA.COM
	701-237-5131 (FAX) 701-237-5098
     Technical Contact, Zone Contact:
	Reynolds, Gerald  (GR1041)  postmaster@SEXZILLA.COM
	701-237-5131 (FAX) 701-237-5098

     Record last updated on 03-Dec-96.
     Record created on 03-Dec-96.

     Domain servers in listed order:

     NS1.NETZILLA.NET             207.70.214.2
     NS1.SEXZILLA.COM             205.198.56.62

In 1997, whois identified netzilla.net as:

    ITC (NETZILLA2-DOM)
       PO box 954
       Moorhead, MN 56561
       US

       Domain Name: NETZILLA.NET

       Administrative Contact, Technical Contact, Zone Contact:
	  Rick, Haider rick@NETZILLA.NET
	  701-237-5131 (FAX) 701-237-5131
       Billing Contact:
	  Rick, Haider rick@NETZILLA.NET
	  701-237-5131 (FAX) 701-237-5131

       Record last updated on 23-Apr-97.
       Record created on 03-Dec-96.
       Database last updated on 15-Aug-97 04:28:55 EDT.

       Domain servers in listed order:

       NS1.NETZILLA.NET             207.70.214.2
       NS1.SEXZILLA.COM             205.198.56.62

Note that the phone numbers are still the same as when the web site was registered to Jerry Reynolds.

As of 2004, the domain is no longer owned by Jerry Reynolds. The domain is now registered, apparently, to Yahoo with an address in Georgia. Nobody is named as a contact. There is no content on the web page.

As of 2005, Arin.net still lists Jerry Reynolds as the owner of Intel Telecom. (Type whois -h whois.arin.net +"Intel Telecom")

In 1996, the whois data for sexzilla.com identified the domain as being owned by Intel Telecom Corporation, with Jerry Reynolds listed as the contact person. Note the email address used by Reynolds at the time

    Intel Telecom Corporation (SEXZILLA-DOM)
       PO Box 6504
       Fargo, ND 58109

       Domain Name: SEXZILLA.COM

       Administrative Contact, Technical Contact, Zone Contact:
	  Jerry, Reynolds  (RJ636)  borrg@AOL.COM
	  701-237-5131              ^^^^^^^^^^^^^

       Record last updated on 15-Dec-96.
       Record created on 25-Jun-96.

       Domain servers in listed order:

       NS1.SEXZILLA.COM             205.198.56.62
       NS2.CORPCOMM.NET             199.165.217.106

In early 1997, the whois data for sexzilla.com identified the domain as being owned by Intel Telecom Corporation, with Jerry Reynolds listed as the contact person.

    Intel Telecom Corporation SEXZILLA-DOM
       PO Box 6504
       Fargo, ND 58109

       Domain Name: SEXZILLA.COM

       Administrative Contact, Technical Contact, Zone Contact:
	  Jerry, Reynolds  RJ636  jerryr@NETZILLA.NET
	  701-237-5131

       Record last updated on 15-Dec-96.
       Record created on 25-Jun-96.

       Domain servers in listed order:

       NS1.SEXZILLA.COM             205.198.56.62
       NS2.CORPCOMM.NET     199.165.217.106

Another Intel Telecom Corporation record.

As of 2004, the domain is no longer owned by Jerry Reynolds. Sexzilla.com is now registered to a domain broker in the Cayman Islands.

The connection between Corpcomm.net and Netzilla/Sexzilla is not entirely clear at the moment. It is known that Corpcomm acted as the network service provider to Netzilla/Sexzilla and that Jerry Reynolds maintained an email address there.

The connection between Newsfeeds.com and Netzilla/Sexzilla is not entirely clear at the moment. It is known that Newsfeeds acted as a usenet feed for Netzilla/Sexzilla.

Netzilla was owned by Jerry Reynolds. Other contact names associated with Netzilla were:

Netzilla also owned the domains jam.net and newsfeeds.com. Netzilla misspelled these domains as jam.com and newsfeed.com as part of their routine path forgery. Note that there was a real newsfeed.com who was probably innocent.

See also: sierracorporatedesign.com, newsgroups.com, nntp.be, nuthinbutnews.com, superfeed.net, usenet.com, binaries.net, ojsimpson.net, jobtrek.com, ugroups.com, and spamkiller.net. Superfeed was previously owned by Brad Allison. As of June 2008, it was owned by Sierra Corporate Design. The rest are owned anonymously via Network Solutions.

See Usenet thread Re: What is spamkiller.net? for an analysis.


Path Forgery

(The following information is old, netzilla spam has stopped.)

Because of forgery, it is sometimes hard to determine where Netzilla is coming from. It is believed they are using POPs, including those owned by linkup.net, UUNet, WillowSprings.mci.net, and fargo.nd.pub-ip.psi.net. UUNet, MCI and PSI remain unresponsive to complaints.

Netzilla Path: lines are heavily forged. The following is an anlysis of a netzilla Path: line, as provided by David Ritz:

 Path: news.alt.net!news1.alt.net!news.exodus.net!paperboy01.iconnet.net!
     news-xfer.netaxs.com!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!
     howland.erols.net!nntp3.crl.com!news1.mid-ga.com!news.hom.net!
1    feed2.newsfeed.com!
2    news.ntl.net!news-feed.inet.com!gateway.cm.org!
2    news.cm.org!bcarh189.bnr.ca!bcarh8ac.bnr.ca!news.alt.net!news1.alt.net!
3    news.jam.com!
4    news1.radix.net!news1.exit109.com!wilbur.ohww.norman.ok.us!rahul.net!
4    news.iswest.net!iswest.com!
5    news.karlia.ru!roo.fosta.au!Pop
Key:

1 'Feed2.newsfeed.com' is actually newsfeeds.com which belongs to NetZilla.
2 Forged path inserted by Newsfeeds.com
3 "News.jam.com" is actually dnewsweb3.netzilla.net, which belongs to NetZilla.
4 Forged path inserted by 'news.jam.com'
5 "News.karlia.ru" and "roo.fosta.au" belong to NetZilla.

Note the forgery of cm.org, exit109.com, rahul.net, iswest.net and others in the Path: line. This is an attempt by the spammers to prevent spam-fighters from seeing the offending posts.

Date: stamps are forged as 24 hours in the future in order to make tracking difficult.


Hosts

According to Howard Knight, Netzilla owned, or was associated with, the following hosts:

DNS addressFake addressIP address
news.netzilla.net
207.70.214.200
dnewsweb3.netzilla.netnews.jam.com
jam.net
207.70.214.201 *
newsfeeds.comfeed2.newsfeed.com207.70.214.202 **
207.70.214.203roo.fosta.au
rua.kanuck.ca
207.70.214.203
mita.iij.co.jpwin.mil.nl207.70.214.204
Notes:

* preloads the forged path:

   news1.radix.net!news1.exit109.com!wilbur.ohww.norman.ok.us!
   rahul.net!news.iswest.net!iswest.com!news.karlia.ru
** preloads the forged path:
   news.ntl.net!news-feed.inet.com!gateway.cm.org!news.cm.org!
   bcarh189.bnr.ca!bcarh8ac.bnr.ca!news.alt.net!news1.alt.net

Site history

7 May 1996:
Jerry Reynolds first appears on the internet spamming the Make.Money.Fast pyramid scam. (See below.)
15 May 1996:
Second known appearance; advertising email spamming services. (See below.)
28 June 1996:
First known porn spam from Reynolds. See X RATED SLIDE SHOW IN REAL TIME!! URL:"206.11.160.163" (cache)
For other examples, try the Google groups searches author:arcc@rrnet.com, and sexzilla
22 Aug 1997:
Jersey.net has terminated or is terminating its peering arrangements with Netzilla.
22 Aug 1997:
Homenet Communications (home.net) has refused to disconnect Netzilla.
23 Aug 1997:
Mid-Ga.com has stopped accepting a feed from Netzilla.
25 Aug 1997:
Network Intensive (ni.net) says they will resolve their Netzilla problem by the end of the week.
2 Sept 1997:
Netzilla is now posting through a U.S. Naval computer.
4 Sept 1997:
Whatever was keeping Netzilla posts from reaching my monitoring sites has stopped.
5 Sept 1997:
Netzilla has renamed their fake "roo.fosta.au" as "rua.kanuck.ca"
5 Sept 1997:
Network Intensive has blocked posts from newsfeeds.com. Netzilla is now posting through MCI.
6 Sept 1997:
Now posting through UUNet
9 Sept 1997:
Ni.net seems to have disconnected Netzilla.
9 Sept 1997:
Now forging "uokhsc.bonn.br" in the headers.
10 Sept 1997:
Now forging "kaist.kr" in the headers.
11 Sept 1997:
Netzilla has just started feeding through CRL.
16 Sept 1997:
Now forging "triumf.ua", "europa.dragon.uk" and "marcopolo.scobs.se" in the headers.
24 Sept 1997:
Sprint is closing Netzilla access. It should take a few days for this to take effect.
3 Oct 1997
UUNet seems to have disconnected Netzilla.
6 Oct 1997
Netzilla now posting through open servers in Italy. Network connectivity still provided by MCI.
7 Oct 1997
Netzilla managed to break into a mis-configured server at Access1. This has been secured.
14 Oct 1997
Word is that MCI has finally blocked Netzilla.
15 Oct 1997
UUNet has reconnected Netzilla.
26 Oct 1997
Netzilla successfully morphed their headers to fool my spam filters; this has caused counts to be about half of what they should be. The problem has been corrected.
8 Dec 1997
Now spamming through Iagnet. Iagnet has been notified and the spam should stop soon.
10 Dec 1997
Netzilla has switched to UUNet POPs in the 153.34.*.* netblock.
10 Dec 1997
Netzilla has switched to Netcom for relaying.
21 Dec 1997
Netcom has disconnected Netzilla.
22 Dec 1997
Netzilla is bouncing between servers, currently exploiting Sprint, Iagnet and Crl
17 Mar 1999
Back again, hosted by UUNet and Cable & Wireless. Spam includes evidence that Netzilla is either hosting babenet, or that they are one and the same -- see analysis.
25 Aug 2004
Has lawyer send a cease-and-desist letter demanding that I remove this information. (Also, if anybody can explain to me how trademark law (the Lanham Act) factors into this, I'd be most curious.)
20 Feb 2005
Has apparently filed a "John Doe" lawsuit against me in his home town of Fargo, ND. See In-Forum news article Porn spam allegation brings suit I have not yet seen the actual complaint.
23 Feb 2005
Rogue cancels are being issued from nuthinbutnews.com, against old netnews articles documenting Netzilla spam. Whois records from 1999 indicate that nuthinbutnews.com was based in Fargo, ND.
Mar 2005
Spamming advertisements for new ugroups.com service. See Google Search, sample 1, sample 2.
29 Oct 2005
In April of 2005, someone in the news.admin.net-abuse.usenet newsgroup asked for information about spamkiller.net. I responded that spamkiller.net is registered anonymously, and that this was an indication that the business was probably not legitimate. In August, Jerry Reynolds' law firm sent a fax to Google demanding that the usenet posts be removed from the archive under a court order issued in North Dakota. Read all about it at Chilling Effects.
The interesting thing here is that my original post never mentioned Jerry Reynolds by name (it's likely that I didn't even know of the connection at the time), and yet Reynolds has had the post removed under a court order banning me from discussing his servers on line. Thus, the fax to Google is essentially a legal document asserting Reynolds' ownership of spamkiller.net
31 Dec 2005
Temporary Restraining Order (pdf) issued.
28 Feb 2006
Press coverage of evidentiary hearing in defamation case.

Make.Money.Fast scam

The first known appearance of Jerry Reynolds was his spamming of the
Make.Money.Fast pyramid scam. The letter was discovered by a Yahoo search on "Reynolds" and "Fargo".

The full text of one copy of the spam is archived here. The letter has proven to be an invaluable source of information on Jerry Reynolds, and has provided insight into the way he works. Howard K. and David Ritz have provided an analysis of the letter:

The email was sent from RRNet.com, a small ISP in Fargo, ND. RRNet kicked Reynolds off the site a long time ago, but Netzilla spam continued to arrive because Jerry would hire college students to sign up with RRNet and post spam.

To: borrg@aol.com
This address was listed by the InterNIC in June of 1996 as being Jerry Reynold's contact address for Sexzilla.

Addresses of interest in the letter are as follows:

4) Kimberly Reynolds
1521 27th Ave. So# 308
Fargo, ND 58103

7)  Helen Balaban
509 Morrison Ave.
West Fgo, ND 58078

8)   Gerald Walton
PO box 612
Moorhead, MN 56561-0612

"Mike Balaban" is a known associate or alias of Jerry Reynolds. The names "Kimberly Reynolds" and "Helen Balaban" are thus of great interest, especially since "Helen Balaban"'s listed snail-mail address is the same as Jerry Reynold's own address. Jerry Reynolds' full legal name is Gerald Walton Reynolds (see the 8th name on the list.)

An earlier version of the same letter was identical except for the names in positions 4 and 8.

Many more examples can be found by entering the search terms "dave rhodes" reynolds into Google Groups search. Most of these search results will be responses from other people either reporting the scam, or repeating it themselves.


Recognizing Netzilla

Netzilla has become progressively better at covering their tracks. Often, the clues to recognizing recent spam lie in examining older documents. For instance, the 1996 whois data for Netzilla showed Jerry Reynolds as the administrative contact. In 1997, it listed someone else, but the phone numbers were the same, so we know the ownership had not really changed.

As another example, once we know that "borrg@aol.com" belongs to Netzilla, we can use this email address as a search pattern in Google Groups. This, in turn, can lead to other identities.

The following is a list of "markers" which can be used to recognize Netzilla spam:

borrg@aol.com
The 1996 whois registration for Sexzilla lists Jerry Reynolds' email address as "borrg@aol.com".
arcc@rrnet.com
Another porn spam (cache) shows the email address "arcc@rrnet.com" and organization "ITC" used by Reynolds. A Google Groups Search shows other posts linking this email to Reynolds.
arcc@earthink.com
This spam for a steel company (cache) shows use of an Earthlink account. Note also that the phone number used in the spam matches the published whois registration for sexzilla.
zed@corpcomm.net
At one time, jerryr@netzilla.net was known to forward to "Jerry Reynolds <zed@corpcomm.net>". zed@corpcomm.net was known to forward to "Jerry Reynolds <zed@ns1.corpcomm.net>". A 1996 post seeking assistant spammers used zed@corpcomm.net in the From: line and was signed "Jerry Reynolds, ITC Entertainment". Look at the Message-ID as well. A server test used the zed@corpcomm.net address. Other examples abound.
jr@jam.net
Found in the registration for nntp.be
brad@jam.net
Brad Allison, Netzilla sysadmin.
itc@black.cat.rrnet.com
Found in usenet article advertising email spamming services.
ITC
Probably short for Intel Telecom. See zed@corpcomm, above. As of April 2007, whois registration still lists ITC having the PO Box 954, Moorhead address and a netzilla.net technical contact.
newsfeed.com, jam.com, news.karlia.ru, roo.fosta.au
Fictitious names inserted into Netzilla spam Path: lines in attempt to throw anti-spammers off the trail. They had the opposite effect of positively identifying Netzilla.
netzilla.net, sexzilla.com, usenet.com, spamkiller.net, PROnews.com, binaries.net, jam.net, jobtrek.com, newsfeeds.com, newsgroups.com, nntp.be, nuthinbutnews.com, sierracorporatedesign.com, superfeed.net, ugroups.com usenet.com
Actual domain names owned or controlled by Reynolds or associated with him.
usenetportal.com
See 2005 registration info. Now registered anonymously.
bincrawler.com
See 2005 registration info. Now registered anonymously.
jobtrek.com
See 1997 registration info. Note ties to Netzilla and Corpcomm.
Binaries.net
See netnews post Spambust Info on: Perfect asian bondage picture (cache). Still registered to Sierra Corporate Design as of Feb, 2006.
OJSimpson.net
See netnews post Re: idiots at sexzilla (whois). Now registered anonymously.
701-235-9503.com
This came up in my court hearing. I was asked how I got Reynolds' unlisted phone number. I answered that I didn't remember, but since I don't have access to unlisted phone numbers, it probably came from a whois registration somewhere. A later search turned up this whois registration. Yes, Jerry Reynolds (or Brad Allison at any rate) did, in fact, register an unlisted phone number as a domain name.
Sierra Corporate Design
Reynolds' "legitimate" business.
Netherland Corp Design
Organization line used in porn spam.
SCD
Used in various places
Trico
Name used to register newsgroups.com. See netnews post (cache)
mawba
Name frequently used in spams. A Google Groups search for this term will produce a lot of results.
P.O. Box 6504, Fargo, ND
Used in several places, including this spam for a steel company (cache). A Google search for this address can be enlightening.
P.O. Box 954, Moorhead, MN
Used in several places, including Netzilla whois registration.
4614 AMBER VALLEY PKWY South
26 Roberts St #111
Also used in a number of places, mainly corporate filings.
Phone numbers
I won't list phone numbers in this case file, as phone numbers tend to change hands and I wouldn't want innocent people to get harassing phone calls. However, searches for the phone numbers contained in whois registrations and spams can often turn up interesting things.
206.11.160.163
The same spam message showing arcc@rrnet.com also shows the ip address 206.11.160.163.
This analysis by jffmcc@cie-2.uoregon.edu (cache) Also shows the Reynolds/arcc/206.11.160.163 connection. (Scroll down or search for 'arcc'.
206.11.160.213
This porn spam (cache) injected through Deja News shows an originating IP address of 206.11.160.213
205.198.56.60
The Another porn spam (cache) shows the ip address 205.198.56.60
152.163.199.30
Another spam (cache) shows the 152.163.199.30 IP address.
X-Proxy-User: $$-nw$
Unique identifier assigned to newsfeeds.com accounts. This particular identifier refers to Brad Allison. See netnews article Rattling Stereo head unit on '03 Accord (cache) and forged article New porn Spammer on the block? (cache), posted two days after Fargo Forum article was published.

Other notable Documents

6 May 1996 Important Info
Make-Money-Fast email spam in its entirety. Note the borrg@aol.com address in the "To:" line connecting this with Jerry Reynolds (presumably real recipients were hidden in Bcc: lines).
15 May 1996 Hoe kom ik hier aan?? (cache)
Post to nl.markt usenet group advertising his email spamming service.
27 June 1996 X RATED SLIDE SHOW IN REAL TIME!! URL:"206.11.160.163" [cache]
Earliest Netzilla porn spam recorded so far. Note Jerry Reynolds' rrnet email address in the header.
10 Sept 1996 MAXIMUM PERVERSION [cache]
Another early Netzilla porn spam. Note Jerry Reynolds' aol email address in the header.
22 Oct 1996 Free FTP SEX PICS One Night Only [cache]
Sample spam. Spamvertised URL is registered to Corpcomm. Note Jerry Reynolds email address in the headers.
1 Dec 1996 SPAMMERS WANTED [cache]
Advertising for assistant spammers. Note Jerry Reynolds email address in the headers and full name in the message body.
19 Dec 1996 TEST [cache]
Testing server configuration.
20 Dec 1996 TEST [cache]
Testing server configuration.
20 Dec 1996 tessssssstttt from new netzilla server [cache]
Testing server configuration.
20 Dec 1996 HAVE SEX WITH MOTHER!! [cache]
Sample spam.
21 Dec 1996 Re: KEEP SUCKIN YOU ROTTEN BITCH!! (SPAM TO KILL)
Early analysis of Netzilla, showing contacts associations and providers.
24 Dec 1996 Spammer Makes Me Angry >:( [cache]
Post from Howard Knight documenting Netzilla spam and Netzilla/Corpcomm connection.
27 Dec 1996 http://152.163.199.30/mawba/biz.html [cache]
Sample spam. Note use of "zed@corpcomm.net" and "mawba".
17 Jan 1997 TIRED OF THE SAME OLD BORING SITES? [cache]
Sample porn spam. Note the message id and From: line tying these to Jerry Reynolds. (Note: missing from Google.com archive; possibly due to rogue cancel)
27 Jan 1997 Spammer Tracked [cache]
Article from Jon Ogden including whois information from 15 Dec 1996. Note identification of Jerry Reynolds as the Administrative Contact of sexzilla.com.
5 Feb 1997 spammer's web site info, please help [cache]
Post including whois information from 3 Dec 1996 identifying Jerry Reynolds as the Administrative Contact of netzilla.net and sexzilla.com.
21 Feb 1997 Netzilla may soon be Homeless [cache]
Post connecting Douglas Kirk to Corpcomm.
1 April 1997 Spam Autocancel report for March 1997 [cache]
Standard spam report, listing Sexzilla as the worst site of the month by a wide margin.
18 April 1997 Re: BEWARE...EXTREME TEEN HARDCORE!! [cache]
Post giving example of Netzilla spam and copying 3 Dec 1996 whois information identifying Jerry Reynolds as the Administrative Contact
6 June 1997 XXX TEEN SEX [cache]
Porn spam sent by Brad Allison under his own name. Note Intel Telecom in the Organization header. Do a Google Groups search for author:b_d_a@earthlink.net or "http://207.70.214.2/clients/studio16-bda.html" for thousands more.
30 June 1997 DOS Attack from newsmaster@netzilla.net [cache]
Documentation of denial-of-service attack launched against David Ritz from Netzilla.
3 Oct 1997 UUCP map for u.usa.nd.1 [cache]
Automatically-generated post by the UUCP Mapping Project, announcing the addition of netzilla as a usenet site. Netzilla was registered to Jerry Reynolds. (Note: missing from Google.com archive; probably due to rogue cancel)
9 Oct 1997 UUCP map for u.usa.nd.1 [excerpt]
Automatically-generated post by the UUCP Mapping Project, announcing the addition of sierradn as a usenet site. Brad Allison is listed as the contact point. Note that the sierradn and netzilla entries list the same phone numbers and street addresses.
13 Oct 1997 Eat My Juicy Pussy [cache]
Sample spam with Netzilla payload. Note win.mil.nl message id and "Netherland Corp Design" organization. Do a Google groups search on "win.mil.nl" for more examples.
30 Oct 1997 Re: Don't let these net bullies push you guys around!! [cache]
Post by Dave Ritz documenting Netzilla header forgery.
17 Nov 1997 - !SCREAM.HTML (0/1) ----->> YOU WILL SCREAM!!! [cache]
Porn spam sent through linkus.com. One example of over 1300 with nearly identical subject lines. Advertised site IP address registered to Netzilla
18 Nov 1997 [usenet] Spam, BI = 1063.187 (NETZILLA=>CRL using , *.hil.compuserve.com POP relay) Sat Nov 15 [cache]
Post by Dave Ritz detailing Netzilla abuse. Includes sample headers from spam and subject lines of 279 spams posted to 451 newsgroups.
14 Oct 1998 Re: EMP - BI>28200 - Matt Middleton's dedicated spam-feed through newsfeed.poshnet.com [cache]
Post about Matt Middleton. Mostly not relavent to Netzilla, but includes as an example an email address verification that shows the email address "Bradley D. Allison <brad@netzilla.net>".
13 Mar 1999 Re: (fwd) Re: Newsfeeds.com/Netzilla back in action? [cache]
Post by Dave Ritz detailing Netzilla and mentioning the connection between Netzilla and Corpcomm. Note the "Jerry Reynolds " email address.
30 Mar 1999 EMP: BI=3381.7611; Max Stemple, AdultServ, Web 877, Qwest, DFW.net, (gartman/stemple) [cache]
Post by Dave Ritz tracking spam from Tom Gartman. Significant in that it shows that it shows sierra-design.com providing service to one of the sites spammed.

Forged Cancels

On 18 Feb 2005, Reynolds initiated a lawsuit against me for defamation. On 21 Feb 2005, a large number of forged cancels were transmitted from Reynolds-controlled servers, targeted at netnews articles in the Google Groups archive that would have been used in my defense.

Fortunately, the forged cancels were not honored by the Google Groups Canada and U.K. servers, and the deleted articles were recoverable.

A detailed examination of the cancels and the articles they were targeted at can be found in Forged Cancels from newsfeeds.com.


Many examples of Netzilla spam can be found with the right Google News search terms. (Warning: adult content)

To report spam, contact one or more of

A complete history may also be available.

General notes:

Return to top | Return to spam summaries | complete history

The opinions expressed on this page are solely those of Ed Falk and do not necessarily represent those of any other organization, (although I hope they do). I wish to thank Rahul.net for hosting this web page.

This page maintained by Ed Falk